$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146297.roa File: AS146297.roa (raw, json) Hash identifier: J/O63YCfZWajBo8PnEaehWqZBLhp/2pBFqZCY8bpYA8= Subject key identifier: 05:AC:2A:4A:26:57:6C:43:58:CC:F7:2E:44:B8:24:0D:67:65:B8:96 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 4B93FF2C6DB57F9915D9570FB90BEF8781B067FD Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146297.roa Signing time: Wed 04 Mar 2026 06:34:17 +0000 ROA not before: Wed 04 Mar 2026 06:29:17 +0000 ROA not after: Wed 03 Mar 2027 06:34:17 +0000 asID: 146297 IP address blocks: 240a:ae3f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:93:ff:2c:6d:b5:7f:99:15:d9:57:0f:b9:0b:ef:87:81:b0:67:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:17 2026 GMT Not After : Mar 3 06:34:17 2027 GMT Subject: CN=05AC2A4A26576C4358CCF72E44B8240D6765B896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cf:43:d9:ee:87:03:d1:38:2e:dc:dc:d5:89: 88:f9:9e:7b:a2:f2:1a:97:6f:dd:51:c3:4a:f5:8e: 6a:d0:61:0f:47:59:6e:3e:81:8a:4e:af:ee:e1:ac: 0a:6d:a8:0f:bc:7e:39:e6:2a:fd:1a:ab:02:ca:43: 02:35:f6:1a:67:66:f8:c5:48:54:ff:07:b9:ba:bf: a2:86:e1:a4:bc:37:90:63:bd:1b:9b:95:02:19:53: da:bf:1c:5e:eb:31:98:4e:da:b5:1a:0d:15:1e:2d: 0d:10:68:5d:21:87:9d:68:1d:3f:6c:2f:05:d6:c3: 5e:4d:6e:29:98:a0:2b:c8:9b:0c:cd:7d:1c:55:17: 83:e4:c3:0f:69:78:2b:7e:7f:90:09:0c:b3:e9:dd: 5f:fb:35:ec:0c:b6:a2:47:28:71:86:59:f9:30:fb: 96:fd:59:45:55:4e:72:ec:d4:f9:a8:a8:f8:32:2b: 12:9a:da:e0:29:7d:43:1a:69:6b:e1:5b:ae:aa:3f: f3:f0:41:e1:d9:1c:64:c8:84:ca:8b:a2:44:22:b2: 4d:65:41:de:cb:e4:a7:53:c5:f1:06:36:eb:1d:20: 33:a3:14:b2:e5:35:51:e8:54:ef:c3:a8:ab:af:73: ab:50:d8:62:e6:a6:37:f2:9d:8c:c3:54:41:ee:55: c2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AC:2A:4A:26:57:6C:43:58:CC:F7:2E:44:B8:24:0D:67:65:B8:96 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146297.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae3f::/32 Signature Algorithm: sha256WithRSAEncryption 0f:46:24:d1:e6:15:0a:86:78:65:56:53:44:75:a6:c3:5e:b6: 75:27:1c:40:2d:54:9d:63:ea:8e:7d:a4:be:19:50:60:28:b1: d0:0f:1f:f0:00:00:96:83:34:5e:a1:c1:d4:c6:2a:7c:6b:ff: a1:ba:8a:b5:86:c1:0a:1e:3c:3b:ee:5d:1b:07:0d:e0:f7:3f: db:9a:d7:dc:53:da:2a:20:ff:24:f2:0f:1d:18:da:52:2a:39: 58:43:04:a6:80:e8:49:ba:63:1b:ea:18:78:de:f0:8f:39:b3: b5:68:d2:82:9d:2d:f5:a3:ef:b2:45:a7:ab:ca:28:dd:28:7c: c2:3a:47:a2:cb:12:dc:09:e6:6a:ff:44:54:ad:8c:13:00:f6: 36:67:6b:1a:f9:ad:3d:5c:a2:99:71:ce:e9:fc:e6:97:0b:8b: 62:38:5c:82:8a:63:bf:25:44:93:68:07:a3:27:d2:84:1d:1d: b3:67:43:b7:c9:12:40:4b:cf:fa:de:6d:1f:6a:3c:94:e3:55: 3f:ee:b9:9b:87:dd:ac:44:d6:b0:64:b8:81:ce:4b:b6:27:9a: 70:f4:64:10:12:36:c5:44:18:bb:81:dc:00:52:d9:18:06:96: 58:81:29:85:2a:00:19:e3:4b:fc:30:ac:2d:2f:66:2a:b1:5c: 6e:b2:90:6f -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUS5P/LG21f5kV2VcPuQvvh4GwZ/0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjkxN1oX DTI3MDMwMzA2MzQxN1owMzExMC8GA1UEAxMoMDVBQzJBNEEyNjU3NkM0MzU4Q0NG NzJFNDRCODI0MEQ2NzY1Qjg5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKLPQ9nuhwPROC7c3NWJiPmee6LyGpdv3VHDSvWOatBhD0dZbj6Bik6v7uGs Cm2oD7x+OeYq/RqrAspDAjX2Gmdm+MVIVP8Hubq/oobhpLw3kGO9G5uVAhlT2r8c XusxmE7atRoNFR4tDRBoXSGHnWgdP2wvBdbDXk1uKZigK8ibDM19HFUXg+TDD2l4 K35/kAkMs+ndX/s17Ay2okcocYZZ+TD7lv1ZRVVOcuzU+aio+DIrEpra4Cl9Qxpp a+Fbrqo/8/BB4dkcZMiEyouiRCKyTWVB3svkp1PF8QY26x0gM6MUsuU1UehU78Oo q69zq1DYYuamN/KdjMNUQe5VwjMCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQFrCpK JldsQ1jM9y5EuCQNZ2W4ljAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjI5Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK rj8wDQYJKoZIhvcNAQELBQADggEBAA9GJNHmFQqGeGVWU0R1psNetnUnHEAtVJ1j 6o59pL4ZUGAosdAPH/AAAJaDNF6hwdTGKnxr/6G6irWGwQoePDvuXRsHDeD3P9ua 19xT2iog/yTyDx0Y2lIqOVhDBKaA6Em6YxvqGHje8I85s7Vo0oKdLfWj77JFp6vK KN0ofMI6R6LLEtwJ5mr/RFStjBMA9jZnaxr5rT1coplxzun85pcLi2I4XIKKY78l RJNoB6Mn0oQdHbNnQ7fJEkBLz/rebR9qPJTjVT/uuZuH3axE1rBkuIHOS7YnmnD0 ZBASNsVEGLuB3ABS2RgGlliBKYUqABnjS/wwrC0vZiqxXG6ykG8= -----END CERTIFICATE-----Generated at Sat Mar 28 11:43:55 2026 by rpki-client